Week 11, 2024

New User Activity Flow Widget

In this release, we are introducing the ‘Activity Flow over the Past 30 days’ widget on the Users Overview tab. This feature provides a visual representation of users’ activities including locations visited, applications access, and related events. It enables you to quickly identify anomalies and investigate specific user activities more effectively.

For instance, this visualization could highlight various use cases, enabling deeper investigations into a user's access and overall processes to improve identity hygiene. For example, it could help visualize applications that a user is not actively logging in to but still has active app-to-app integrations turned on.

User Activity Event Filter

When you navigate to the ‘Activity’ tab of the User360 profile, you will notice a new filter button located to the left of the search bar. Clicking on this button opens a side drawer, enabling you to filter user events and pinpoint specific events you are investigating. This customization of your view of a user's event enhances the efficiency of your investigations into a user’s activity. For example, if you observe a significant spike in events for a user, being able to easily filter out irrelevant events allows you to delve deeper into investigating the cause of the spike.

View User Events for Mitigated Checks

Now, for mitigated checks, you can view the corresponding user events displayed in the activity table for the user. When clicking on ‘View Logs’, you’ll be directed to a filtered view of the ‘Activity’ tab of the User360 profile. Previously, only system events were displayed, but with this release, you’ll now see an enhanced view including the corresponding events that triggered the check. This provides you with more clarity and understanding regarding why and what events triggered the check.

Bug Fixes and Minor Improvements

• Last sign-in location dashboard. Bug fix for the ‘Last Sign-in Attempt over past 30 days’, where when you click on the map it is now the last seen in the location instead of the IP details. Ensuring what you see on the dashboards matches what you see when you click on a location.

• Update for Inconsistency user status. We have updated the status for tenants without IdP’s. You will now see a tag of ‘inconsistent’ when on the user360 profile.

• Open risky events in new tab. Now you can right-click and open risky events in a new tab on the user360 profile.